Legal
Privacy Policy
LAST UPDATED · JULY 2, 2026
This policy says plainly what we collect, why, who processes it, and what control you have. The short version: we collect what the product needs to work — your account, your billing status, your worksheets, and first-party usage events. No ad trackers, no selling data, essential cookies only. Your engineering content is yours; AI providers see it only when you invoke an AI feature, and it is not used to train models.
1.Who we are
CalcPackage is operated by Limit State Software LLC, Pittsburgh, Pennsylvania. We are the controller of the personal information described here. Contact us anytime at support@calcpackage.com.
2.What we collect
Account information. When you sign up, our identity provider (Clerk) collects your name, email address, and — if you use social sign-in — basic profile details from that provider. We never see or store your password.
Billing information. Payments are processed by Stripe. Card numbers go directly to Stripe and never touch our servers; we store your Stripe customer reference, plan, and subscription status.
Your engineering content. Worksheets, calculation packages, templates, custom libraries, uploaded images, review comments, and the verification log (the audit trail of verify/unlock/review actions on a worksheet, recording who did what and when).
Usage events. We run first-party product analytics (for example: which features are used, calculator-funnel events like “signup clicked”). These events go to our own database — we do not use third-party analytics or advertising trackers, and we do not track you across other sites.
Support records. Tickets you open, and — only with your explicit per-ticket consent — a worksheet snapshot, a time-limited live view grant, or a screen recording you attach.
Technical data. IP addresses and request metadata used transiently for rate limiting and abuse prevention, plus standard server logs.
Cookies. We use essential cookies only — the session cookies our identity provider needs to keep you signed in. No advertising or cross-site cookies. The public calculators use your browser’s sessionStorage to carry a draft calculation through sign-up; that data stays in your browser until you sign up or it expires.
3.How we use it
- to provide, operate, and secure the Service;
- to process subscriptions and payments;
- to run the features you invoke — evaluating calculations, rendering PDFs, processing AI requests, sharing worksheets you choose to share;
- to send transactional email (receipts, review notifications, support replies) via Resend — we do not send marketing email without your consent;
- to understand product usage through our first-party analytics and improve the Service;
- to respond to support requests you open;
- to enforce our Terms and comply with law.
4.AI features and your content
When you invoke an AI feature (generate, explain, ask, research), the relevant content — your prompt and the worksheet context needed to answer — is sent to our AI provider, currently OpenAI, to produce the response.
- Per OpenAI’s API terms, content submitted through the API is not used to train their models.
- OpenAI may retain API content briefly (per their policy, up to 30 days) for abuse monitoring, after which it is deleted.
- AI features run only when you invoke them. Anonymous visitors on the public calculators never trigger AI processing.
- Avoid placing information in prompts that you are not permitted to share with a service provider (for example, another party’s confidential data).
5.Who processes your data (subprocessors)
We do not sell your personal information, and we do not share it with advertisers. We use a small set of infrastructure providers to run the Service, each processing data only to provide their function:
- Clerk — authentication and account identity;
- Supabase — our Postgres database and file storage (worksheets, profiles, uploads);
- Vercel — application hosting;
- Railway — compute for symbolic math and PDF rendering (your worksheet content transits during those operations);
- Stripe — payments and billing;
- Resend — transactional email delivery;
- OpenAI — AI features you invoke (Section 4);
- Upstash — rate limiting (transient request metadata).
Beyond these providers, we disclose personal information only if required by law or legal process, to protect the rights and safety of users or the public, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to your data until changed with notice).
7.Retention and deletion
Your content is retained while your account is active. If you delete a worksheet, it is removed from the application; if you delete your account (or ask us to at support@calcpackage.com), we delete your account data from production systems within 30 days, and it expires from encrypted backups on our backup rotation (up to 35 additional days).
- Support snapshots, live-access grants, and recordings are retained only as long as needed to resolve the ticket and are then purged on the schedule in our support documentation.
- Billing records are retained as required for tax and accounting law.
- Rate-limiting data is transient and expires automatically within minutes to hours.
8.Your rights and choices
Email support@calcpackage.com to access, correct, export, or delete your personal information. We honor these requests for all users regardless of location, and we will respond within 30 days. Depending on where you live (for example the EEA/UK under GDPR, or California under the CCPA), you may have additional statutory rights — including the right to complain to your local supervisory authority. We do not sell or “share” personal information as those terms are defined in the CCPA.
You can manage billing (including cancellation) from the in-app billing portal, and you can export any worksheet as a PDF at any time.
9.Security
All traffic is encrypted in transit (TLS), data is encrypted at rest by our database provider, database access is enforced with row-level security so each account can only read its own rows, administrative service credentials are isolated from the browser, and support access to customer content requires your explicit consent and is audit logged. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you as required by law.
10.Children and international use
CalcPackage is a professional tool. It is not directed to children, and you must be at least 18 to create an account. We do not knowingly collect personal information from children; if you believe a child has provided us personal information, contact us and we will delete it.
The Service is hosted in the United States. If you use it from elsewhere, your information is processed in the U.S. under this policy.
11.Changes to this policy
If we make material changes we will notify you by email or in-app at least 14 days before they take effect. The “Last updated” date above always reflects the current revision. Questions or concerns: support@calcpackage.com. See also our Terms of Service.